VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Core 2 45nm (1067a); 2009 Intel Core 2 Duo E7600; 2 x 3060MHz; wolfdale, supercop-20260330

[Page version: 20260413 04:20:10]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
10.5910.6110.61ascon128av12
15.3115.3115.32ascon80pqv12
15.3815.3815.38ascon128v12
19.9219.9419.95ascon128abi32v12
20.2520.3020.34T:aes128gcmv1
22.6822.6922.72T:xoodyakround3
25.0425.0925.12T:aes256gcmv1
29.0529.0529.05ascon128bi32v12
30.5030.6230.89T:schwaemm256128v2
40.5140.5840.71T:schwaemm256256v2
40.6240.6940.73T:schwaemm128128v2
40.5840.7341.81T:schwaemm192192v2
48.8949.0749.70romulusn
53.3553.4853.55T:giftcofb128v1
62.4862.7164.98T:grain128aeadv2
63.3863.4263.53T:isapa128av20
66.5366.8167.08T:isapa128v20
78.8778.9278.93T:tinyjambu128v2
79.6979.7779.80romulusm
94.7094.9195.14T:tinyjambu192v2
102.96103.25103.51T:tinyjambu256v2
154.50154.67154.81T!!!romulust
237.72237.74237.94T:isapk128av20
252.75254.77266.35T:elephant200v2
325.98326.33329.36T:isapk128v20
316.06341.04348.52T:isapxv20
13043.1713053.8213106.32T:elephant176v2
14805.7214816.3514825.47T:elephant160v2
34029.5834041.0934062.06aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
10.2910.3010.31ascon128av12
15.2515.2515.25ascon80pqv12
15.2915.2915.29ascon128v12
20.3520.3620.38T:aes128gcmv1
20.3020.6020.64ascon128abi32v12
22.4922.5322.63T:xoodyakround3
24.8024.8624.89T:aes256gcmv1
29.3429.3429.34ascon128bi32v12
30.3530.9031.07T:schwaemm256128v2
40.6340.6640.71T:schwaemm128128v2
40.5540.7441.78T:schwaemm192192v2
40.7340.7740.85T:schwaemm256256v2
48.8148.9449.42romulusn
53.3553.4753.52T:giftcofb128v1
63.3863.4263.47T:isapa128av20
66.3866.7467.20T:isapa128v20
62.41?68.88?74.09?T:grain128aeadv2
78.8478.8778.89T:tinyjambu128v2
79.5979.6879.90romulusm
94.5994.6294.70T:tinyjambu192v2
102.57102.66102.74T:tinyjambu256v2
154.23154.48154.85T!!!romulust
237.61237.73237.95T:isapk128av20
252.74253.90266.82T:elephant200v2
325.80326.25328.61T:isapk128v20
316.49340.59348.45T:isapxv20
13045.0413062.7513111.81T:elephant176v2
14801.7114817.1414824.75T:elephant160v2
34033.3034043.5334058.28aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
10.2910.3010.32ascon128av12
15.2315.2315.23ascon80pqv12
15.2915.2915.31ascon128v12
20.3420.3720.40T:aes128gcmv1
20.6420.6520.65ascon128abi32v12
22.5522.5922.63T:xoodyakround3
24.8124.8724.90T:aes256gcmv1
29.3429.3429.34ascon128bi32v12
30.3630.8731.07T:schwaemm256128v2
33.6633.6933.74T:isapa128v20
40.6240.6540.70T:schwaemm128128v2
40.7440.7840.87T:schwaemm256256v2
40.4740.8141.78T:schwaemm192192v2
41.5441.5941.68T:isapa128av20
48.8148.9249.42romulusn
53.3053.4353.64T:giftcofb128v1
54.1854.4554.51T!!!romulust
62.46?68.94?74.12?T:grain128aeadv2
78.8478.8778.89T:tinyjambu128v2
79.6079.7079.86romulusm
94.5994.5994.61T:tinyjambu192v2
102.59102.67102.74T:tinyjambu256v2
162.53162.55162.66T:isapk128av20
185.22?202.24?211.57?T:isapxv20
202.78202.89203.36T:isapk128v20
252.80254.74266.18T:elephant200v2
847.03851.93855.06aes256gcmv1
13043.5913052.4613105.78T:elephant176v2
14801.4714817.1014825.32T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
10.2210.2410.31ascon128av12
14.1614.1814.20T:aes128gcmv1
15.1215.1215.12ascon128v12
15.1415.1415.15ascon80pqv12
16.5516.5616.58T:aes256gcmv1
16.6416.6516.67T:xoodyakround3
19.7019.7519.75ascon128abi32v12
29.1529.1529.16ascon128bi32v12
30.5530.6330.67T:schwaemm256128v2
39.8640.0840.31romulusn
40.4840.6141.32T:schwaemm192192v2
40.5840.6740.76T:schwaemm256256v2
40.6240.7940.80T:schwaemm128128v2
50.0150.0450.47T:isapa128v20
52.6152.6252.62T:isapa128av20
53.2253.3953.42T:giftcofb128v1
55.2255.3255.41romulusm
62.0662.3264.39T:grain128aeadv2
64.6364.6664.73T:tinyjambu128v2
74.2374.3774.78T:tinyjambu192v2
78.0378.1478.22T:tinyjambu256v2
103.70103.94104.13T!!!romulust
189.87191.14200.47T:elephant200v2
201.03201.29201.89T:isapk128av20
265.93266.28269.16T:isapk128v20
256.04267.03278.96T:isapxv20
9744.759750.639794.94T:elephant176v2
11128.6511134.9811143.16T:elephant160v2
17438.2917445.0817460.57aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
10.2010.2110.25ascon128av12
14.2114.2214.22T:aes128gcmv1
15.1015.1015.10ascon80pqv12
15.2515.2515.25ascon128v12
16.4316.4816.50T:aes256gcmv1
16.5616.5816.61T:xoodyakround3
20.1920.1920.19ascon128abi32v12
29.1929.1929.19ascon128bi32v12
30.6030.8330.87T:schwaemm256128v2
39.8239.9140.18romulusn
40.4440.4940.56T:schwaemm128128v2
40.4540.6241.33T:schwaemm192192v2
40.7240.7640.82T:schwaemm256256v2
50.0250.2050.47T:isapa128v20
52.5752.5952.60T:isapa128av20
53.1553.2353.31T:giftcofb128v1
55.3355.5155.62romulusm
64.3864.4464.54T:tinyjambu128v2
62.20?67.77?73.26?T:grain128aeadv2
74.4874.5474.57T:tinyjambu192v2
78.1278.1578.21T:tinyjambu256v2
103.84104.22104.44T!!!romulust
189.84191.06199.70T:elephant200v2
201.28201.56202.25T:isapk128av20
265.57266.28268.84T:isapk128v20
256.09266.68278.90T:isapxv20
9744.669750.069792.00T:elephant176v2
11127.7911132.6411139.97T:elephant160v2
17441.7617447.3917453.47aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
10.2010.2110.24ascon128av12
14.2114.2214.23T:aes128gcmv1
15.0715.0715.08ascon80pqv12
15.2515.2515.25ascon128v12
16.4216.4716.49T:aes256gcmv1
16.5916.6216.65T:xoodyakround3
20.0520.0520.05ascon128abi32v12
29.1429.1429.15ascon128bi32v12
30.6130.8330.87T:schwaemm256128v2
33.6933.6933.70T:isapa128v20
39.8239.9140.18romulusn
40.4440.4840.61T:schwaemm128128v2
40.4740.5741.30T:schwaemm192192v2
40.6640.7640.84T:schwaemm256256v2
41.6641.6841.69T:isapa128av20
53.1353.2153.31T:giftcofb128v1
53.6053.8954.14T!!!romulust
55.3155.4755.65romulusm
64.3764.4064.53T:tinyjambu128v2
62.18?67.75?72.36?T:grain128aeadv2
74.4874.5474.57T:tinyjambu192v2
78.1378.1578.20T:tinyjambu256v2
163.68163.97164.11T:isapk128av20
189.84191.06199.72T:elephant200v2
190.83198.00210.58T:isapxv20
204.25204.49205.35T:isapk128v20
849.12851.13852.70aes256gcmv1
9744.219749.319788.56T:elephant176v2
11129.5911135.2611141.65T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
8.078.078.09T:aes128gcmv1
8.068.088.10T:aes256gcmv1
9.869.8710.06ascon128av12
10.5810.6210.69T:xoodyakround3
15.0115.0115.01ascon80pqv12
15.0115.0115.01ascon128v12
19.4619.5619.56ascon128abi32v12
29.2529.2529.25ascon128bi32v12
30.3230.4130.60T:schwaemm256128v2
30.7930.8030.84romulusm
30.7730.8430.95romulusn
33.5033.6533.81T:isapa128v20
40.4040.4240.52T:schwaemm256256v2
40.3940.6140.90T:schwaemm192192v2
40.4240.8840.92T:schwaemm128128v2
41.8041.8041.82T:isapa128av20
50.3450.3650.42T:tinyjambu128v2
52.9753.1253.17T:giftcofb128v1
53.1753.2553.57T!!!romulust
53.4453.4453.44T:tinyjambu256v2
53.6653.7453.96T:tinyjambu192v2
61.7262.1063.93T:grain128aeadv2
127.89128.72134.67T:elephant200v2
164.34164.55165.50T:isapk128av20
186.77?203.22?212.50?T:isapxv20
205.60206.14206.48T:isapk128v20
843.79850.90857.49aes256gcmv1
6442.096450.566473.72T:elephant176v2
7394.947412.067427.53T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
8.058.078.10T:aes256gcmv1
8.078.088.10T:aes128gcmv1
10.1110.1210.12ascon128av12
10.6210.6410.66T:xoodyakround3
15.0815.0915.09ascon80pqv12
15.1215.1215.13ascon128v12
19.4419.4519.45ascon128abi32v12
29.0129.0229.03ascon128bi32v12
30.3030.3930.57T:schwaemm256128v2
30.8430.8530.85romulusm
30.8030.8830.96romulusn
33.5533.7133.90T:isapa128v20
40.3940.4240.52T:schwaemm256256v2
40.1640.5540.86T:schwaemm192192v2
40.3240.6740.93T:schwaemm128128v2
41.7641.8041.84T:isapa128av20
49.8149.8850.18T:tinyjambu128v2
52.9853.1653.17T:giftcofb128v1
53.5553.6153.61T:tinyjambu256v2
53.1953.6954.37T!!!romulust
54.4254.4354.44T:tinyjambu192v2
61.94?66.30?72.56?T:grain128aeadv2
127.84128.67134.82T:elephant200v2
164.68165.39165.44T:isapk128av20
187.98?203.26?212.75?T:isapxv20
205.54206.06206.35T:isapk128v20
847.46851.62854.74aes256gcmv1
6443.786455.056480.12T:elephant176v2
7401.747417.127430.00T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
8.058.068.10T:aes256gcmv1
8.068.088.11T:aes128gcmv1
10.1110.1210.12ascon128av12
10.6110.6310.68T:xoodyakround3
15.0915.0915.09ascon80pqv12
15.1215.1215.12ascon128v12
19.3019.3119.37ascon128abi32v12
28.9228.9228.92ascon128bi32v12
30.2930.4030.56T:schwaemm256128v2
30.7830.8530.96romulusn
30.8330.8530.85romulusm
33.5733.7233.90T:isapa128v20
40.4040.4240.52T:schwaemm256256v2
40.2840.4340.92T:schwaemm128128v2
40.1340.5040.86T:schwaemm192192v2
41.7641.8141.85T:isapa128av20
49.8249.8850.15T:tinyjambu128v2
52.9653.1653.17T:giftcofb128v1
53.5753.6153.61T:tinyjambu256v2
53.1953.6654.38T!!!romulust
54.4154.4354.44T:tinyjambu192v2
61.86?66.27?72.43?T:grain128aeadv2
127.80128.62132.84T:elephant200v2
164.69165.39165.44T:isapk128av20
187.53?203.24?212.39?T:isapxv20
205.52206.07206.42T:isapk128v20
847.90851.69854.65aes256gcmv1
6441.016449.616474.60T:elephant176v2
7396.117415.747433.44T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
10.4710.4910.49ascon128av12
15.0615.0715.08T:aes128gcmv1
15.3115.3115.31ascon128v12
15.3715.3715.38ascon80pqv12
16.8316.8616.89T:xoodyakround3
17.4817.4917.50T:aes256gcmv1
20.1420.1920.19ascon128abi32v12
29.6029.6029.60ascon128bi32v12
31.5331.5431.58T:schwaemm256128v2
40.2540.3440.68romulusn
41.1141.3041.36T:schwaemm128128v2
41.4441.6742.19T:schwaemm192192v2
41.7741.8041.88T:schwaemm256256v2
53.7953.9253.94T:giftcofb128v1
55.5955.6755.69romulusm
56.6456.6956.88T:isapa128av20
62.6362.7764.73T:grain128aeadv2
65.1565.1665.17T:tinyjambu128v2
73.6073.6573.69T:isapa128v20
74.9175.1175.31T:tinyjambu192v2
78.6578.7578.76T:tinyjambu256v2
105.42105.66105.86T!!!romulust
194.53194.99203.38T:elephant200v2
226.92227.25227.75T:isapk128av20
437.91443.52451.37T:isapxv20
449.05449.32452.10T:isapk128v20
9821.789824.369859.67T:elephant176v2
11255.4211259.9311265.10T:elephant160v2
17790.4217796.5417809.81aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
10.4410.4410.50ascon128av12
15.0715.0815.08T:aes128gcmv1
15.3515.3515.35ascon80pqv12
15.4615.4615.46ascon128v12
16.7516.7616.79T:xoodyakround3
17.3817.4017.41T:aes256gcmv1
20.6120.6120.61ascon128abi32v12
29.6429.6429.65ascon128bi32v12
31.5731.7231.75T:schwaemm256128v2
40.2340.3240.54romulusn
41.0541.0541.17T:schwaemm128128v2
41.4641.6242.20T:schwaemm192192v2
41.8641.8841.94T:schwaemm256256v2
53.6953.7253.79T:giftcofb128v1
55.7955.8555.92romulusm
56.6656.6956.69T:isapa128av20
64.8764.8964.92T:tinyjambu128v2
63.37?68.32?73.16?T:grain128aeadv2
73.2673.3573.46T:isapa128v20
75.0675.1375.23T:tinyjambu192v2
78.7578.7978.81T:tinyjambu256v2
105.35105.62106.09T!!!romulust
194.53194.92203.34T:elephant200v2
227.15227.42227.64T:isapk128av20
438.49443.62451.38T:isapxv20
448.98449.19451.19T:isapk128v20
9822.369823.839858.06T:elephant176v2
11255.3311259.5311266.06T:elephant160v2
17790.8617795.8117807.34aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
10.4410.4510.50ascon128av12
15.0915.0915.10T:aes128gcmv1
15.3215.3215.32ascon80pqv12
15.4615.4615.46ascon128v12
16.7816.7916.83T:xoodyakround3
17.3917.4017.42T:aes256gcmv1
20.4720.4720.47ascon128abi32v12
29.5929.5929.59ascon128bi32v12
31.5231.6931.74T:schwaemm256128v2
40.2240.3040.54romulusn
41.0541.0641.23T:schwaemm128128v2
41.4341.5842.19T:schwaemm192192v2
41.8541.8741.94T:schwaemm256256v2
43.9743.9844.16T:isapa128av20
45.5545.5645.56T:isapa128v20
53.6953.7253.80T:giftcofb128v1
55.4155.6455.70T!!!romulust
55.8055.8655.95romulusm
64.8764.8964.92T:tinyjambu128v2
63.36?68.29?73.12?T:grain128aeadv2
75.0775.1375.21T:tinyjambu192v2
78.7578.7978.81T:tinyjambu256v2
179.84180.15180.18T:isapk128av20
194.52195.19203.35T:elephant200v2
283.88288.94298.58T:isapxv20
299.52299.70299.93T:isapk128v20
1199.231200.941203.12aes256gcmv1
9821.509827.809861.35T:elephant176v2
11256.7411260.4511266.12T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
15.8715.8715.91ascon128av12
20.0320.0320.03ascon128v12
20.3520.3520.35ascon80pqv12
26.2426.2726.38T:xoodyakround3
30.1930.1930.21ascon128abi32v12
34.9735.1035.25T:aes128gcmv1
39.0039.3339.43T:aes256gcmv1
39.7339.7339.73ascon128bi32v12
49.0749.1949.42romulusn
53.6653.7654.91T:schwaemm128128v2
54.3954.7955.37T:schwaemm256128v2
64.5064.5064.92romulusm
65.6465.8665.99T:giftcofb128v1
67.5369.4769.69T:schwaemm256256v2
69.7370.9271.39T:schwaemm192192v2
71.5472.4574.89T:grain128aeadv2
76.9977.0677.24T:tinyjambu128v2
87.5987.6887.93T:tinyjambu192v2
92.1292.2092.46T:tinyjambu256v2
144.30144.43144.83T!!!romulust
149.28149.28149.29T:isapa128av20
275.52276.60288.13T:elephant200v2
610.38611.67612.34T:isapa128v20
779.55779.76780.11T:isapk128av20
4355.994389.444623.26T:isapxv20
4602.734602.964604.97T:isapk128v20
12203.7812232.0212283.98T:elephant176v2
15033.0315050.7715113.80T:elephant160v2
25803.5425857.0225890.03aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.8015.8015.86ascon128av12
20.2620.2620.26ascon128v12
20.3420.3420.34ascon80pqv12
25.6625.7025.76T:xoodyakround3
30.3730.5130.69ascon128abi32v12
34.6534.6834.71T:aes128gcmv1
38.8939.1439.24T:aes256gcmv1
39.9539.9540.02ascon128bi32v12
49.0349.2149.36romulusn
53.3253.6053.92T:schwaemm128128v2
54.1354.7455.06T:schwaemm256128v2
65.5565.5765.86T:giftcofb128v1
66.4866.4866.62romulusm
69.0169.4369.67T:schwaemm256256v2
70.7371.0371.45T:schwaemm192192v2
76.9777.0777.16T:tinyjambu128v2
72.77?78.82?84.54?T:grain128aeadv2
88.2288.2688.58T:tinyjambu192v2
92.5292.5892.81T:tinyjambu256v2
143.95144.38144.79T!!!romulust
149.88149.88149.90T:isapa128av20
275.55276.69288.08T:elephant200v2
604.60606.43608.64T:isapa128v20
780.01780.14780.36T:isapk128av20
4350.644374.974622.30T:isapxv20
4602.554602.684616.20T:isapk128v20
12202.9012233.2612286.93T:elephant176v2
15050.2815051.7215135.44T:elephant160v2
25804.2025859.2325896.74aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
15.8015.8015.80ascon128av12
20.2620.2620.26ascon128v12
20.3220.3220.33ascon80pqv12
25.6425.7025.79T:xoodyakround3
30.5030.5130.52ascon128abi32v12
34.9635.1135.24T:aes128gcmv1
38.8939.1539.27T:aes256gcmv1
39.8439.9239.94ascon128bi32v12
49.0549.2149.45romulusn
53.4153.7654.78T:schwaemm128128v2
54.1554.7155.05T:schwaemm256128v2
65.5565.5865.91T:giftcofb128v1
66.4866.4966.77romulusm
69.2969.4969.69T:schwaemm256256v2
70.4170.9071.15T:schwaemm192192v2
76.9677.0577.15T:tinyjambu128v2
72.07?78.85?85.77?T:grain128aeadv2
88.2288.2788.61T:tinyjambu192v2
91.4091.5992.03T!!!romulust
92.5292.5492.80T:tinyjambu256v2
96.2496.2496.27T:isapa128av20
275.69277.35288.36T:elephant200v2
317.86318.06318.10T:isapa128v20
518.06518.21518.32T:isapk128av20
2276.072294.092416.66T:isapxv20
2446.622446.772448.23T:isapk128v20
9237.759239.289265.50aes256gcmv1
12203.5812233.8312301.25T:elephant176v2
15030.9915050.2515109.45T:elephant160v2